A scalable SIEM correlation engine and its application to the Olympic Games IT infrastructure

The security event correlation scalability has become a major concern for security analysts and IT administrators when considering complex IT infrastructures that need to handle gargantuan amounts of events or wide correlation window spans. The current correlation capabilities of Security Information and Event Management (SIEM), based on a single node in centralized servers, have proved to be insufficient to process large event streams. This paper introduces a step forward in the current state of the art to address the aforementioned problems. The proposed model takes into account the two main aspects of this ?eld: distributed correlation and query parallelization. We present a case study of a multiple-step attack on the Olympic Games IT infrastructure to illustrate the applicability of our approach.

Integrated sustainable urban infrastructure management: the Brisbane urban growth model

Sustainable urban development and the liveability of a city are increasingly important issues in the context of land use planning and infrastructure management. In recent years, the promotion of sustainable urban development in Australia and overseas is facing various physical, socio-economic and environmental challenges. These challenges and problems arise from the lack of capability of local governments to accommodate the needs of the population and economy in a relatively short timeframe. The planning of economic growth and development is often dealt with separately and not included in the conventional land use planning process. There is also a sharp rise in the responsibilities and roles of local government for infrastructure planning and management. This increase in responsibilities means that local elected officials and urban planners have less time to prepare background information and make decisions. The Brisbane Urban Growth Model has proven initially successful in providing a dynamic platform to ensure timely and coordinated delivery of urban infrastructure. Most importantly, this model is the first step for local governments in moving toward a systematic approach to pursuing sustainable and effective urban infrastructure management.

Brisbane urban growth model : an integrated infrastructure management framework for Brisbane, Australia

In recent years, local government infrastructure management practices have evolved from conventional land use planning to more wide ranging and integrated urban growth and infrastructure management approaches. The roles and responsibilities of local government are no longer simply to manage daily operational functions of a city and provide basic infrastructure. Local governments are now required to undertake economic planning, manage urban growth; be involved in major infrastructure planning; and even engage in achieving sustainable development objectives. The Brisbane Urban Growth model has proven initially successful to ensure timely and coordinated delivery of urban infrastructure. This model may be the first step for many local governments to move toward an integrated, sustainable and effective infrastructure management.

Sustainable urban infrastructure management : integration of urban computer modelling

Purpose - This paper seeks to examine the complex relationships between urban planning, infrastructure management, sustainable urban development, and to illustrate why there is an urgent need for local governments to develop a robust planning support system which integrates with advance urban computer modelling tools to facilitate better infrastructure management and improve knowledge sharing between the community, urban planners, engineers and decision makers. Design/methodology/approach - The methods used in this paper includes literature review and practical project case observations. Originality/value - This paper provides an insight of how the Brisbane's planning support system established by Brisbane City Council has significantly improved the effectiveness of urban planning, infrastructure management and community engagement through better knowledge management processes. Practical implications - This paper presents a practical framework for setting up a functional planning support system within local government. The integration of the Brisbane Urban Growth model, Virtual Brisbane and the Brisbane Economic Activity Monitoring (BEAM) database have proven initially successful to provide a dynamic platform to assist elected officials, planners and engineers to understand the limitations of the local environment, its urban systems and the planning implications on a city. With the Brisbane's planning support system, planners and decision makers are able to provide better planning outcomes, policy and infrastructure that adequately address the local needs and achieve sustainable spatial forms.

Integrated sustainable urban infrastructure management : the Brisbane urban growth model

Sustainable urban development and the liveability of a city are increasingly important issues in the context of land use planning and infrastructure management. In recent years, the promotion of sustainable urban development in Australia and overseas is facing various physical, socioeconomic and environmental challenges. These challenges and problems arise from the lack of capability of local governments to accommodate the needs of the population and economy in a relatively short timeframe. The planning of economic growth and development is often dealt with separately and not included in the conventional land use planning process. There is also a sharp rise in the responsibilities and roles of local government for infrastructure planning and management. This increase in responsibilities means that local elected officials and urban planners have less time to prepare background information and make decisions. The Brisbane Urban Growth Model has proven initially successful in providing a dynamic platform to ensure timely and coordinated delivery of urban infrastructure. Most importantly, this model is the first step for local governments in moving toward a systematic approach to pursuing sustainable and effective urban infrastructure management.

Brisbane urban growth model : an integrated infrastructure management framework for Brisbane, Australia

In recent years, local government infrastructure management practices have evolved from conventional land use planning to more wide ranging and integrated urban growth and infrastructure management approaches. The roles and responsibilities of local government are no longer simply to manage daily operational functions of a city and provide basic infrastructure. Local governments are now required to undertake economic planning, manage urban growth; be involved in major infrastructure planning; and even engage in achieving sustainable development objectives. The Brisbane Urban Growth model has proven initially successful to ensure timely and coordinated delivery of urban infrastructure. This model may be the first step for many local governments to move toward an integrated, sustainable and effective infrastructure management.

Australian commercial-critical infrastructure management protection

Secure management of Australia's commercial critical infrastructure presents ongoing challenges to owners and the government. Although managed via a high-level information sharing collaboration of government and business, critical infrastructure protection is further complicated by the lack of a lower-level scalable model exhibiting its various levels, sectors and sub-sectors. This research builds on the work of Marasea (2003) to establish a descriptive critical infrastructure model and also considers the influence and proposed modelling of critical infrastructure dependency inter-relationships.

Design and delivery of undergraduate IT security management course

Information technology has become the core tool of business organisations’. External and internal threats as well as legal, regulatory and contractual compliance requirements are all combining to make effective information security a key information technology management challenges. This paper describes an undergraduate information technology security management course that provides comprehensive knowledge and skills necessary to manage both strategic and operational aspects of information security. The course covers a broad range of managerial topics in information technology security and makes use of a number of security tools and techniques to complement the theory taught. In this paper, we describe our approach, our experiences and lessons learned for teaching information technology security management course. The paper details the content of the course and outlines how it is taught and assessed.

Formulating an organizational knowledge strategy : the influence of existing IT infrastructure

This paper questions the influence of a pre-existing information technology (IT) infrastructure on the formulation of an organizational knowledge strategy. We draw on a classification of four different strategic views of IT infrastructure and explore how the historic investment in IT infrastructure enables and constrains the formulation of knowledge strategy in four case organizations. The four case organizations are representative of different scenarios of historic investments in IT infrastructure and knowledge strategy formulation. Our findings indicate that an IT infrastructure that is minimal or fragmented constrains the formulation of an explicit knowledge strategy. We further find that an extensive existing IT infrastructure enables the pursuit of an explicit knowledge strategy, but that even an elaborate IT infrastructure can introduce some constraints on IT facilitated knowledge processes in the organization.

A model to select processes for IT service management improvement

IT organisations are continually seeking improvements in managing IT service management processes. The selection of relevant processes to improve is one of the most crucial initial decisions to make in service improvement projects. In this paper, we focus on developing a process selection decision model using service perception factors from the Service Quality (SERV-QUAL) model and business drivers from the Balanced Scorecard perspectives along with the main objective of service improvement as improvement driver. We use a Design Science Research method to develop the model and then a prototype from our proposed model. We establish an evaluation protocol to determine the effectiveness of the prototype which will be demonstrated in a case organisation. The main contribution of the paper is to provide evidence-based decision support for IT service providers to select the most relevant service processes to improve.

Agile it project management professional

La gestión de las tecnologías de la información tiene cada vez más importancia dentro de un mundo totalmente digitalizado y donde la capacidad de respuesta al cambio puede marcar el devenir de una compañía, y resulta cada vez más evidente que los modelos de gestión tradicionales utilizados en la mayoría de las compañías no son capaces de dar respuesta por si solos a estas nuevas necesidades. Aun teniendo identificado este área de mejora, son muchas las empresas reacias a abordar estos cambios, principalmente por el cambio rupturista que significa a nivel interno. De cara a facilitar esta transformación, se propone en este documento un modelo de transición controlada donde las grandes compañías puedan incorporar nuevas alternativas y herramientas ágiles de forma paulatina y asegurando que el proceso de cambio es seguro y efectivo. Mediante una modificación del ciclo de vida de proyecto dentro de la compañía, se incorporan en las áreas, equipos o dominios de la empresa que se identifiquen los nuevos modelos de gestión ágil, permitiendo así una transición gradual y controlada, y pudiendo además analizar los detalles sobre todo en etapas tempranas de la transformación. Una vez seleccionada el área o dominio objeto de la transformación, se realiza un análisis a nivel de Portfolio de proyectos, identificando aquellos que cumplen una serie de condiciones que les permiten ser gestionados utilizando modelos de gestión ágil. Para ello, se plantea una matriz de decisión con las principales variables a tener en cuenta a la hora de tomar una decisión. Una vez seleccionado y consensuado con los interesados el modelo de gestión utilizando la matriz de decisión, se plantean una serie de herramientas y métricas asociadas para que la gestión ágil del proyecto dé una visibilidad completa y detallada del estado en cada momento, asegurando un correcto proceso de gestión de proyectos para proveer visibilidad regular del progreso, riesgos, planes de contingencia y problemas, con las alertas y escalaciones adecuadas. Además de proponerse una serie de herramientas y métricas para la gestión ágil del proyecto, se plantean las modificaciones necesarias sobre las tipologías habituales de contrato y se propone un nuevo modelo de contrato: el Contrato Agile. La principal diferencia entre este nuevo modelo de contrato y los habituales es que, al igual que las metodologías ágiles, es ejecutado en segmentos o iteraciones. En definitiva, el objetivo de este documento es proveer un mecanismo que facilite la inclusión de nuevos modelos ágiles de gestión en grandes organizaciones, llevando a cabo una transición controlada, con herramientas y métricas adaptadas para tener visibilidad completa sobre los proyectos en todo momento.---ABSTRACT---The information technology management is every time more important in a totally digitized world, where the capacity to response the change could mark the future of a company, and results every time more evident that the traditional management models used in the most of the companies are not able to respond by themselves to these new necessities. Even having identified this improvement area, many companies are reluctant to address these changes, mainly due to the disruptive change that it means internally in the companies. In order to facilitate this transformation, this document proposed a controlled transition model to help the big companies to incorporate new alternatives and agile tools gradually and ensuring that the change process is safe and effective. Through a modification the project life cycle inside the company, the new agile management models are incorporated in the selected areas, teams or domains, permitting a gradual and controlled transition, and enabling further analyze the details above all in the early phases of the transformation. Once is selected the area or domain object of the transformation, a portfolio level analysis is performed, identifying those projects that meet a some conditions that allow them to be managed using agile management models. For that, a decision matrix is proposed with the principal variables to have into account at the time of decision making. Once the management model is selected using the decision matrix and it is agreed with the different stakeholders, a group of tools and metrics associated with the agile management projects are proposed to provide a regular visibility of the project progress, risks, contingency plans and problems, with proper alerts and escalations. Besides the group of tools and metrics proposed for agile project management, the necessary modifications over the traditional contract models and a new contract model are proposed: the Agile Contract. The main difference between this new contract model and the traditional ones is that, as the agile methodologies, it is executed in segments or iterations. To sum up, the objective of this document is to provide a mechanism that facilitates the inclusion of new agile management models in big companies, with a controlled transition and proposing adapted tools and metrics to have a full visibility over the project in all the phases of the project life cycle.